适用于移动云计算的多文件数据完整性验证方案

A Multiple-files Data Integrity Verification Scheme in Mobile Cloud Computing

针对移动终端存储空间和计算能力的局限性,提出一个新的适用于移动云计算的多文件数据完整性验证方案。首先,用户发送一个代理授权证书给代理签名方为自己生成代理签名,在代理签名前用户可以上传追加数据到云存储服务器;然后,代理签名方为用户生成代理签名并上传云存储服务器;最后,用户验证代理签名的有效性,代理签名完成。将繁重的代理签名任务交给代理签名方执行,减轻了移动终端用户的计算压力。采用多文件的聚合签名的形式,降低云端和移动用户的通信开销。在随机预言模型下,证明了该方案的安全性。

Concerning the limitation of storage space and computing power of the mobile terminal,a new multiple-files data integrity verification scheme for mobile cloud computing was proposed. Firstly,the data owner sent a agent certificate of authorization to proxy party to generate the proxy signature and the data owner can upload additional data to the cloud storage server before proxy signature generated; secondly,proxy party generated proxy signature for the user and uploaded the signature to the cloud storage server; finally,the user verified the validity of the proxy signature and completed the proxy signature. In the scheme by using identity-based proxy signature,the system did not need to manage the public key certifications and the mobile users did not need to take additional cost to authenticate others＇ certificates yet. The heavy proxy signature work with proxy signature party will reduce the computation pressure of mobile terminal. Using the form of multiple files aggregate signature to reduce the communication overhead of cloud and mobile users. The security of the scheme is proved in the random oracle model.